CVE-2026-86926

EUVD-2026-85429
A heap buffer overflow vulnerability in the FileMaker Server database engine block parsing routine allowed a maliciously crafted .fmp12 database file to cause memory corruption, potentially leading to arbitrary code execution. This vulnerability is addressed in FileMaker Server version 26.0.3.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 2.44%
Affected Products (NVD)
VendorProductVersion
clarisfilemaker_server
𝑥
< 26.0.3
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://support.claris.com/s/answerview?anum=000049219&language=en_US